DNSSEC Debugger - recodex.at

Domain Name:

Time: 2024-05-13 18:08:52 UTC

Analyzing DNSSEC problems for recodex.at

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 865 octets ;; HEADER SECTION ;; id = 49687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to l.root-servers.net for recodex.at/A
	Received 921 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 921 octets ;; HEADER SECTION ;; id = 33774 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; recodex.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) at. 172800 IN NS d.ns.at. at. 172800 IN NS j.ns.at. at. 172800 IN NS n.ns.at. at. 172800 IN NS r.ns.at. at. 172800 IN NS u.ns.at. at. 172800 IN NS ns1.univie.ac.at. at. 172800 IN NS ns2.univie.ac.at. at. 172800 IN NS ns9.univie.ac.at. at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . aw/Wq2mDhousZwXF32B7ru+aysGA6LQHZGZfs5YWane2vHW/6IVFn7RQHOguDkfK25W0UsF47+i7 c6xVS/MMH75h9BX5DoB980FZNURE+qj7pOZWfEH4GeRdk49uJITuGtnoziWfwolxPp8Sz+hQuO39 n1FuIe9ZKwjewTADAutgCDoC31UgaAK/yE94iRqO3ExGv7xlYGJ+uJ6tBgxGMfDL+ADRp9tS50mb WmH2fNIpz8O7BEXjnYwk+2Hd/AIdaXmdBQef98uGSMsFPkm5buqGn57T859NoGTxUthw28V690z0 QhztshGlI63JMIjwO7W+HHjK4CyBCDMJr/BMsw== ) ;; ADDITIONAL SECTION (17 records) d.ns.at. 172800 IN A 81.91.161.98 d.ns.at. 172800 IN AAAA 2a02:568:20:1::d j.ns.at. 172800 IN A 194.146.106.50 j.ns.at. 172800 IN AAAA 2001:67c:1010:12::53 n.ns.at. 172800 IN A 81.91.173.130 n.ns.at. 172800 IN AAAA 2a02:568:281::130 r.ns.at. 172800 IN A 194.0.25.10 r.ns.at. 172800 IN AAAA 2001:678:20::10 u.ns.at. 172800 IN A 185.102.12.2 u.ns.at. 172800 IN AAAA 2a02:850:ffff::2 ns1.univie.ac.at. 172800 IN A 78.104.144.2 ns1.univie.ac.at. 172800 IN AAAA 2001:628:2030:4301::2 ns2.univie.ac.at. 172800 IN A 192.92.125.2 ns2.univie.ac.at. 172800 IN AAAA 2001:678:1c::2 ns9.univie.ac.at. 172800 IN A 194.0.10.100 ns9.univie.ac.at. 172800 IN AAAA 2001:678:d::cafe ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for at/DNSKEY
	Received 913 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 913 octets ;; HEADER SECTION ;; id = 14937 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) at. 172800 IN NS u.ns.at. at. 172800 IN NS ns2.univie.ac.at. at. 172800 IN NS n.ns.at. at. 172800 IN NS d.ns.at. at. 172800 IN NS ns9.univie.ac.at. at. 172800 IN NS r.ns.at. at. 172800 IN NS ns1.univie.ac.at. at. 172800 IN NS j.ns.at. at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . aw/Wq2mDhousZwXF32B7ru+aysGA6LQHZGZfs5YWane2vHW/6IVFn7RQHOguDkfK25W0UsF47+i7 c6xVS/MMH75h9BX5DoB980FZNURE+qj7pOZWfEH4GeRdk49uJITuGtnoziWfwolxPp8Sz+hQuO39 n1FuIe9ZKwjewTADAutgCDoC31UgaAK/yE94iRqO3ExGv7xlYGJ+uJ6tBgxGMfDL+ADRp9tS50mb WmH2fNIpz8O7BEXjnYwk+2Hd/AIdaXmdBQef98uGSMsFPkm5buqGn57T859NoGTxUthw28V690z0 QhztshGlI63JMIjwO7W+HHjK4CyBCDMJr/BMsw== ) ;; ADDITIONAL SECTION (17 records) u.ns.at. 172800 IN A 185.102.12.2 u.ns.at. 172800 IN AAAA 2a02:850:ffff::2 ns2.univie.ac.at. 172800 IN A 192.92.125.2 ns2.univie.ac.at. 172800 IN AAAA 2001:678:1c::2 n.ns.at. 172800 IN A 81.91.173.130 n.ns.at. 172800 IN AAAA 2a02:568:281::130 d.ns.at. 172800 IN A 81.91.161.98 d.ns.at. 172800 IN AAAA 2a02:568:20:1::d ns9.univie.ac.at. 172800 IN A 194.0.10.100 ns9.univie.ac.at. 172800 IN AAAA 2001:678:d::cafe r.ns.at. 172800 IN A 194.0.25.10 r.ns.at. 172800 IN AAAA 2001:678:20::10 ns1.univie.ac.at. 172800 IN A 78.104.144.2 ns1.univie.ac.at. 172800 IN AAAA 2001:628:2030:4301::2 j.ns.at. 172800 IN A 194.146.106.50 j.ns.at. 172800 IN AAAA 2001:67c:1010:12::53 ;; { "EDNS-VERSION": 0 }
	Found child zone at

	Checking DS between . and at
	Query to d.root-servers.net for at/DS
	Received 414 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 414 octets ;; HEADER SECTION ;; id = 2945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DS ;; ANSWER SECTION (3 records) at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . aw/Wq2mDhousZwXF32B7ru+aysGA6LQHZGZfs5YWane2vHW/6IVFn7RQHOguDkfK25W0UsF47+i7 c6xVS/MMH75h9BX5DoB980FZNURE+qj7pOZWfEH4GeRdk49uJITuGtnoziWfwolxPp8Sz+hQuO39 n1FuIe9ZKwjewTADAutgCDoC31UgaAK/yE94iRqO3ExGv7xlYGJ+uJ6tBgxGMfDL+ADRp9tS50mb WmH2fNIpz8O7BEXjnYwk+2Hd/AIdaXmdBQef98uGSMsFPkm5buqGn57T859NoGTxUthw28V690z0 QhztshGlI63JMIjwO7W+HHjK4CyBCDMJr/BMsw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for at in the . zone
	DS=1253/SHA-256 has algorithm ECDSAP256SHA256
	DS=18942/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`at. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . aw/Wq2mDhousZwXF32B7ru+aysGA6LQHZGZfs5YWane2vHW/6IVFn7RQHOguDkfK25W0UsF47+i7 c6xVS/MMH75h9BX5DoB980FZNURE+qj7pOZWfEH4GeRdk49uJITuGtnoziWfwolxPp8Sz+hQuO39 n1FuIe9ZKwjewTADAutgCDoC31UgaAK/yE94iRqO3ExGv7xlYGJ+uJ6tBgxGMfDL+ADRp9tS50mb WmH2fNIpz8O7BEXjnYwk+2Hd/AIdaXmdBQef98uGSMsFPkm5buqGn57T859NoGTxUthw28V690z0 QhztshGlI63JMIjwO7W+HHjK4CyBCDMJr/BMsw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=1253/SHA-256 is now in the chain-of-trust
	DS=18942/SHA-256 is now in the chain-of-trust
	`at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e )`
	`at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f )`
	Query to ns1.univie.ac.at for at/DNSKEY
	Received 449 bytes from 78.104.144.2
	;; Response received from [78.104.144.2] 449 octets ;; HEADER SECTION ;; id = 2016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DNSKEY ;; ANSWER SECTION (5 records) at. 3600 IN DNSKEY ( 256 3 13 Yye3yFQfyzze/CB9a+89JY/Zyf7L9gEXx9dI72oHyNU1mrMXdKU69LXiNAl9xnW+7BEFjO2NaxoI +h3F4tsF/A== ) ; Key ID = 8460 at. 3600 IN DNSKEY ( 256 3 13 afqJ2CAlm26vL9vdgWZlvBp1BhCXAvXGPDf96ykT8cf7i7uir4QQA5mLi9wikE4WnvD6Y8S9mU4f 3SUgmaQOEA== ) ; Key ID = 6345 at. 3600 IN DNSKEY ( 257 3 13 F4hxGBIycDfw7ZIeJ1bkOjeGibnoNdlJ9siahr/GPYh9sIftAPCNOSiypWUnNeKu9zHpFY+HtzzP gbZmLO1VRQ== ) ; Key ID = 18942 at. 3600 IN DNSKEY ( 257 3 13 2JRF0JhWxU1FWmhF7eY9oPu4XkUdqPDVNi3tm6uXJ9DxltWjAS2JMBdAmm6ehsMdlsvsMV+cz+7D ZGMzNhbX1g== ) ; Key ID = 1253 at. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240520031520 20240505160155 18942 at. cXduBJuwjj1cCpQHUD8NVg1jmJFB4HQ2aj3ZfpcUC2SJu6XXiZI1S8C97XG0CfanxeMtrJbB1ysP G9ADGDSR/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for at
	`at. 3600 IN DNSKEY ( 256 3 13 Yye3yFQfyzze/CB9a+89JY/Zyf7L9gEXx9dI72oHyNU1mrMXdKU69LXiNAl9xnW+7BEFjO2NaxoI +h3F4tsF/A== ) ; Key ID = 8460`
	`at. 3600 IN DNSKEY ( 256 3 13 afqJ2CAlm26vL9vdgWZlvBp1BhCXAvXGPDf96ykT8cf7i7uir4QQA5mLi9wikE4WnvD6Y8S9mU4f 3SUgmaQOEA== ) ; Key ID = 6345`
	`at. 3600 IN DNSKEY ( 257 3 13 F4hxGBIycDfw7ZIeJ1bkOjeGibnoNdlJ9siahr/GPYh9sIftAPCNOSiypWUnNeKu9zHpFY+HtzzP gbZmLO1VRQ== ) ; Key ID = 18942`
	`at. 3600 IN DNSKEY ( 257 3 13 2JRF0JhWxU1FWmhF7eY9oPu4XkUdqPDVNi3tm6uXJ9DxltWjAS2JMBdAmm6ehsMdlsvsMV+cz+7D ZGMzNhbX1g== ) ; Key ID = 1253`
	DNSKEY=18942/SEP is now in the chain-of-trust
	DS=18942/SHA-256 verifies DNSKEY=18942/SEP
	DNSKEY=1253/SEP is now in the chain-of-trust
	DS=1253/SHA-256 verifies DNSKEY=1253/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`at. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240520031520 20240505160155 18942 at. cXduBJuwjj1cCpQHUD8NVg1jmJFB4HQ2aj3ZfpcUC2SJu6XXiZI1S8C97XG0CfanxeMtrJbB1ysP G9ADGDSR/w== )`
	RRSIG=18942 and DNSKEY=18942/SEP verifies the DNSKEY RRset
	DNSKEY=8460 is now in the chain-of-trust
	DNSKEY=6345 is now in the chain-of-trust
	Query to j.ns.at for recodex.at/A
	Received 231 bytes from 194.146.106.50
	;; Response received from [194.146.106.50] 231 octets ;; HEADER SECTION ;; id = 30230 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; recodex.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) recodex.at. 10800 IN NS dns19.ovh.net. recodex.at. 10800 IN NS ns19.ovh.net. recodex.at. 10800 IN DS ( 5177 8 2 230fd48b98b2765aff63d724fe0090c3c2cd876fde5a9eb68ca81d7394b7f5dd ) recodex.at. 10800 IN RRSIG ( DS 13 2 10800 20240521220148 20240508160155 6345 at. vk9JpW28iJfyTz/voJyd60tqg4Hm+rJNI/yrx3IUBfGU+kIBTh3xUSdALDezLQ5z4mW+xBlMx5z+ VifUthXiAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to j.ns.at for recodex.at/DNSKEY
	Received 231 bytes from 194.146.106.50
	;; Response received from [194.146.106.50] 231 octets ;; HEADER SECTION ;; id = 44490 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; recodex.at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) recodex.at. 10800 IN NS dns19.ovh.net. recodex.at. 10800 IN NS ns19.ovh.net. recodex.at. 10800 IN DS ( 5177 8 2 230fd48b98b2765aff63d724fe0090c3c2cd876fde5a9eb68ca81d7394b7f5dd ) recodex.at. 10800 IN RRSIG ( DS 13 2 10800 20240521220148 20240508160155 6345 at. vk9JpW28iJfyTz/voJyd60tqg4Hm+rJNI/yrx3IUBfGU+kIBTh3xUSdALDezLQ5z4mW+xBlMx5z+ VifUthXiAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone recodex.at

recodex.at

	Checking DS between at and recodex.at
	Query to ns9.univie.ac.at for recodex.at/DS
	Received 185 bytes from 194.0.10.100
	;; Response received from [194.0.10.100] 185 octets ;; HEADER SECTION ;; id = 43831 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; recodex.at. IN DS ;; ANSWER SECTION (2 records) recodex.at. 10800 IN DS ( 5177 8 2 230fd48b98b2765aff63d724fe0090c3c2cd876fde5a9eb68ca81d7394b7f5dd ) recodex.at. 10800 IN RRSIG ( DS 13 2 10800 20240521220148 20240508160155 6345 at. vk9JpW28iJfyTz/voJyd60tqg4Hm+rJNI/yrx3IUBfGU+kIBTh3xUSdALDezLQ5z4mW+xBlMx5z+ VifUthXiAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for recodex.at in the at zone
	DS=5177/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`recodex.at. 10800 IN RRSIG ( DS 13 2 10800 20240521220148 20240508160155 6345 at. vk9JpW28iJfyTz/voJyd60tqg4Hm+rJNI/yrx3IUBfGU+kIBTh3xUSdALDezLQ5z4mW+xBlMx5z+ VifUthXiAg== )`
	RRSIG=6345 and DNSKEY=6345 verifies the DS RRset
	DS=5177/SHA-256 is now in the chain-of-trust
	`recodex.at. 10800 IN DS ( 5177 8 2 230fd48b98b2765aff63d724fe0090c3c2cd876fde5a9eb68ca81d7394b7f5dd )`
	Query to ns19.ovh.net for recodex.at/DNSKEY
	Received 931 bytes from 213.251.128.139
	;; Response received from [213.251.128.139] 931 octets ;; HEADER SECTION ;; id = 34291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; recodex.at. IN DNSKEY ;; ANSWER SECTION (4 records) recodex.at. 3600 IN DNSKEY ( 256 3 8 AwEAAdOR2decxhrZXd0N8od0WQcGo1aH+qcLq6J6veiNmu1UmJhDNR7JvSGGsaqkju923AWv+D3+ fL3eI0Ums8cHSEPColRGonUNixGLz2HlbicJy1s3V/thKg6UQoUJ5Wi3glZzjU20ZbOFUcsBVPvG UHJJZSz9/7p0wHC+GQXYsuy7 ) ; Key ID = 45396 recodex.at. 3600 IN DNSKEY ( 257 3 8 AwEAAbQRg/EWzLJMMVeubPs3bOOOi27gZAy8wx4Ul+PmgBoyx22wZu6FsS7wS9GI5oYn9QSyS+ST mQOfN1nRVoupCdi50/3zTFS0bRTAYENw2Pb2FnCEvNxYFLicyuNHqjKZRABtqPYqLDtTuFD8C1wA WZj3ySl7R+F0fMRK1qqPNIePjbtQ+0PyV1QB/m2f2l3PcLpw5iFBJc6pkFRpVRjN+enwSeyNI9Mc NNc6EyzFV/AxtCVHtti4ToMu+QByU2EMnGeyWo04Ct0WqNTGTVFvGpkxh64P/zBTpXWqlrkBQ2Rm z2udpaF/UrmDy22e3U7I0HaZTo4nAXhmyWbUnzjCSWk= ) ; Key ID = 5177 recodex.at. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240610080804 20240511080804 5177 recodex.at. XYJER35WfHbWGZOyaWInYbCm/Sze3AjIvoepxL27Z+2eNzDOkfbezyO8d5j37dXPHN7V1ICTWu1X luaG+wjU+nTWUWFZ82AprS9RLx6f4RFRqxOGvTwPdlRO8UskzmOoKMT8GFZkCQgul8q2Mkxz8m5U I8NXR2hPHQ9DROrAkTLodKEJt7ilxpZt4NonQlQyXvvGSA5VaMlDsQpDOM8uO1wwIFpK+dFpzvxE oYJUehVzWIusEbffk0g+4Di15bBYGnDX2fQCvPP7g1fZIs7Rap/0iOp/XLUtmOsXR1FdQm2+9aR6 SheFWNpA0a3Som/70A7KSVqSDLajdx2ONGJ5VA== ) recodex.at. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240610080804 20240511080804 45396 recodex.at. S7dkX1aaPRpGqmJE/DZycJ2zrVA3cTTy5VvDdCWNZicW02FU6AfYcacwshRZ5JxR91dhq1WEJAHn Or38mLsBEdcTv8DtM6K7fBo0rsPRxPtCS0TAtesgRSJapTniDBWfki6T0+fkRP4s+srjK5nZK2f9 OV0g/NkYF222+q4VmTI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for recodex.at
	`recodex.at. 3600 IN DNSKEY ( 256 3 8 AwEAAdOR2decxhrZXd0N8od0WQcGo1aH+qcLq6J6veiNmu1UmJhDNR7JvSGGsaqkju923AWv+D3+ fL3eI0Ums8cHSEPColRGonUNixGLz2HlbicJy1s3V/thKg6UQoUJ5Wi3glZzjU20ZbOFUcsBVPvG UHJJZSz9/7p0wHC+GQXYsuy7 ) ; Key ID = 45396`
	`recodex.at. 3600 IN DNSKEY ( 257 3 8 AwEAAbQRg/EWzLJMMVeubPs3bOOOi27gZAy8wx4Ul+PmgBoyx22wZu6FsS7wS9GI5oYn9QSyS+ST mQOfN1nRVoupCdi50/3zTFS0bRTAYENw2Pb2FnCEvNxYFLicyuNHqjKZRABtqPYqLDtTuFD8C1wA WZj3ySl7R+F0fMRK1qqPNIePjbtQ+0PyV1QB/m2f2l3PcLpw5iFBJc6pkFRpVRjN+enwSeyNI9Mc NNc6EyzFV/AxtCVHtti4ToMu+QByU2EMnGeyWo04Ct0WqNTGTVFvGpkxh64P/zBTpXWqlrkBQ2Rm z2udpaF/UrmDy22e3U7I0HaZTo4nAXhmyWbUnzjCSWk= ) ; Key ID = 5177`
	DNSKEY=5177/SEP is now in the chain-of-trust
	DS=5177/SHA-256 verifies DNSKEY=5177/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`recodex.at. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240610080804 20240511080804 5177 recodex.at. XYJER35WfHbWGZOyaWInYbCm/Sze3AjIvoepxL27Z+2eNzDOkfbezyO8d5j37dXPHN7V1ICTWu1X luaG+wjU+nTWUWFZ82AprS9RLx6f4RFRqxOGvTwPdlRO8UskzmOoKMT8GFZkCQgul8q2Mkxz8m5U I8NXR2hPHQ9DROrAkTLodKEJt7ilxpZt4NonQlQyXvvGSA5VaMlDsQpDOM8uO1wwIFpK+dFpzvxE oYJUehVzWIusEbffk0g+4Di15bBYGnDX2fQCvPP7g1fZIs7Rap/0iOp/XLUtmOsXR1FdQm2+9aR6 SheFWNpA0a3Som/70A7KSVqSDLajdx2ONGJ5VA== )`
	`recodex.at. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240610080804 20240511080804 45396 recodex.at. S7dkX1aaPRpGqmJE/DZycJ2zrVA3cTTy5VvDdCWNZicW02FU6AfYcacwshRZ5JxR91dhq1WEJAHn Or38mLsBEdcTv8DtM6K7fBo0rsPRxPtCS0TAtesgRSJapTniDBWfki6T0+fkRP4s+srjK5nZK2f9 OV0g/NkYF222+q4VmTI= )`
	RRSIG=5177 and DNSKEY=5177/SEP verifies the DNSKEY RRset
	RRSIG=45396 and DNSKEY=45396 verifies the DNSKEY RRset
	DNSKEY=45396 is now in the chain-of-trust
	Query to dns19.ovh.net for recodex.at/A
	Received 225 bytes from 213.251.188.139
	;; Response received from [213.251.188.139] 225 octets ;; HEADER SECTION ;; id = 42075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; recodex.at. IN A ;; ANSWER SECTION (2 records) recodex.at. 3600 IN A 213.239.199.250 recodex.at. 3600 IN RRSIG ( A 8 2 3600 20240610080804 20240511080804 45396 recodex.at. CP2aei1AabzeqzFPcIxXB/ot7OaMiVTCr+s5+R8fDZ7xGgDaFGr0GBLdKYjwsjXuoL1Sxaz6ZEP3 XLE3N3Yd/KVZUjrYxuHNa7+chtTshLBtglEp8fapYw5ORHJAi27B5Xl8JvY7GIDSwa0r/0eI2heW kn+89GIYMA5lVmxsXio= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns19.ovh.net is authoritative for recodex.at
	Found RRSIG signed by recodex.at zone
	Query to ns19.ovh.net for recodex.at/SOA
	Received 263 bytes from 213.251.128.139
	;; Response received from [213.251.128.139] 263 octets ;; HEADER SECTION ;; id = 51161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; recodex.at. IN SOA ;; ANSWER SECTION (2 records) recodex.at. 3600 IN SOA ( dns19.ovh.net. tech.ovh.net. 2024051100 ;serial 86400 ;refresh 3600 ;retry 3600000 ;expire 300 ;minimum ) recodex.at. 3600 IN RRSIG ( SOA 8 2 3600 20240610080804 20240511080804 45396 recodex.at. ntqlAoj1jRA/R7BQZeSSpTI3zG7wY9byacKRvlDUE1ec2v+5dfQ7mwQhPnbP+rEkCzbCLOsqqOd9 PqJIRzA2AdyTxkcTkKtv8jKXQDUIGuUYPeI14CpyTiJep/eOOljXyTI1+zEp0RZ9maQLTMctIPRz Zy+J0JzZOcHYMdIBpcM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns19.ovh.net for recodex.at/A
	Received 225 bytes from 213.251.188.139
	;; Response received from [213.251.188.139] 225 octets ;; HEADER SECTION ;; id = 46507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; recodex.at. IN A ;; ANSWER SECTION (2 records) recodex.at. 3600 IN A 213.239.199.250 recodex.at. 3600 IN RRSIG ( A 8 2 3600 20240610080804 20240511080804 45396 recodex.at. CP2aei1AabzeqzFPcIxXB/ot7OaMiVTCr+s5+R8fDZ7xGgDaFGr0GBLdKYjwsjXuoL1Sxaz6ZEP3 XLE3N3Yd/KVZUjrYxuHNa7+chtTshLBtglEp8fapYw5ORHJAi27B5Xl8JvY7GIDSwa0r/0eI2heW kn+89GIYMA5lVmxsXio= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	recodex.at A RR has value 213.239.199.250
	Found 1 RRSIGs over A RRset
	`recodex.at. 3600 IN RRSIG ( A 8 2 3600 20240610080804 20240511080804 45396 recodex.at. CP2aei1AabzeqzFPcIxXB/ot7OaMiVTCr+s5+R8fDZ7xGgDaFGr0GBLdKYjwsjXuoL1Sxaz6ZEP3 XLE3N3Yd/KVZUjrYxuHNa7+chtTshLBtglEp8fapYw5ORHJAi27B5Xl8JvY7GIDSwa0r/0eI2heW kn+89GIYMA5lVmxsXio= )`
	RRSIG=45396 and DNSKEY=45396 verifies the A RRset

recodex.at

	Query to ns19.ovh.net for recodex.at/A
	Received 225 bytes from 213.251.128.139
	;; Response received from [213.251.128.139] 225 octets ;; HEADER SECTION ;; id = 40778 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; recodex.at. IN A ;; ANSWER SECTION (2 records) recodex.at. 3600 IN A 213.239.199.250 recodex.at. 3600 IN RRSIG ( A 8 2 3600 20240610080804 20240511080804 45396 recodex.at. CP2aei1AabzeqzFPcIxXB/ot7OaMiVTCr+s5+R8fDZ7xGgDaFGr0GBLdKYjwsjXuoL1Sxaz6ZEP3 XLE3N3Yd/KVZUjrYxuHNa7+chtTshLBtglEp8fapYw5ORHJAi27B5Xl8JvY7GIDSwa0r/0eI2heW kn+89GIYMA5lVmxsXio= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns19.ovh.net is authoritative for recodex.at
	Found RRSIG signed by recodex.at zone
	Query to ns19.ovh.net for recodex.at/A
	Received 225 bytes from 213.251.128.139
	;; Response received from [213.251.128.139] 225 octets ;; HEADER SECTION ;; id = 32528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; recodex.at. IN A ;; ANSWER SECTION (2 records) recodex.at. 3600 IN A 213.239.199.250 recodex.at. 3600 IN RRSIG ( A 8 2 3600 20240610080804 20240511080804 45396 recodex.at. CP2aei1AabzeqzFPcIxXB/ot7OaMiVTCr+s5+R8fDZ7xGgDaFGr0GBLdKYjwsjXuoL1Sxaz6ZEP3 XLE3N3Yd/KVZUjrYxuHNa7+chtTshLBtglEp8fapYw5ORHJAi27B5Xl8JvY7GIDSwa0r/0eI2heW kn+89GIYMA5lVmxsXio= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	recodex.at A RR has value 213.239.199.250
	Found 1 RRSIGs over A RRset
	`recodex.at. 3600 IN RRSIG ( A 8 2 3600 20240610080804 20240511080804 45396 recodex.at. CP2aei1AabzeqzFPcIxXB/ot7OaMiVTCr+s5+R8fDZ7xGgDaFGr0GBLdKYjwsjXuoL1Sxaz6ZEP3 XLE3N3Yd/KVZUjrYxuHNa7+chtTshLBtglEp8fapYw5ORHJAi27B5Xl8JvY7GIDSwa0r/0eI2heW kn+89GIYMA5lVmxsXio= )`
	RRSIG=45396 and DNSKEY=45396 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test recodex.at at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: